sushiswap-v3[.]pages[.]dev

This domain, sushiswap-v3.pages.dev, is flagged for brand impersonation targeting SushiSwap, a decentralized exchange platform. Analysis indicates the site mimics the legitimate SushiSwap V3 interface, presenting itself as 'SushiSwap V3 – Advanced Decentralized Exchange.' No direct evidence of a crypto drainer kit has been identified at this stage, but the domain’s structure and content align with tactics used to deceive users into disclosing wallet credentials or approving malicious transactions. Infrastructure analysis reveals the domain was registered on August 23, 2025, through Cloudflare, Inc. and resolves to IP address 172.66.47.115, hosted on AS13335. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains. VirusTotal reports 0/95 detections, indicating no current antivirus engines flag the domain as malicious. However, it appears on one security blocklist (PhishDestroy) and remains under investigation for further indicators of compromise. The domain remains active as of the latest verification, with no takedown or sinkholing observed. Users are advised to treat any interaction with this domain as high-risk, particularly if prompted for wallet connections or transaction approvals. Organizations should monitor for related infrastructure, including subdomains or associated IPs, and update blocklists to prevent access. Further investigation is required to determine the full scope of the threat, including potential backend infrastructure or linked malicious payloads.